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IPsec is the standard suite of protocols for network-layer confidentiality and authentication of 
Internet traffic. The IrSeC prutuCuis, iiuwever, uu iiul address the puiiueb fur iiuw prutecleu 
traffic should be handled at security end points. This article introduces an efficient policy 
management scheme for IPsec, based on the principles of trust management. A compliance 
check is added to the IPsec architecture that tests packet filters proposed when new security 
associations are created for confo ... 
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Configuring redundant disk arrays is a black art. To configure an array properly, a system 
administrator must understand the details of both the array and the workload it will support. 
Incorrect understanding of either, or changes in the workload over time, can lead to poor 
performance. We present a solution to this problem: a two-level storage hierarchy implemented 
inside a single disk-array controller. In the upper level of this hierarchy, two copies of active 
data are stored to provide f ... 
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